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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND claims 1-10 and ADD new claim 1 1 in accordance with the following: 

1 . (CURRENTLY AMENDED) A packet filtering method characterized by storing 
filtering information for use in filtering at a receiving side in a packet to be sent to the receiving 
side and sending it from a sending side, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with Ipv6 1 
said filtering information being immune from encryption to allow packet filtering . 

2. (CURRENTLY AMENDED) A packet filtering method characterized by receiving a 
packet, at a receiving side, from a sending side, detecting filtering information stored in that 
packet, holding predetermined filtering information of the receiving side, comparing filtering 
information of the sending side detected from the packet with the filtering information of the 
receiving side, and, when the two do not match, discarding that packet, whereinthe filtering 
information is stored in an Ipv6 extended header added to an Ipv6 header or in a flow label 
region in an Ipv6 header, when the packet is a packet in compliance with Ipv6 , said filtering 
information being immune from encryption to allow packet filtering . 

3. (CURRENTLY AMENDED) Communication equipment at a packet sending side 
including a function unit for achieving a packet filtering, 

said communication equipment characterized by having at least: 
a setting unit for setting freely determined filtering information, 
a filter key holding unit for holding the filtering information input by the setting unit as a 
filter key, and 

a filter key storing function unit for receiving as input the held filter key and storing the 
filter key in a header portion of a packet, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with lpv6 A 
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said filtering information being immune from encryption to allow packet filtering . 

4. (CURRENTLY AMENDED) Communication equipment of a packet receiving side 
including a function unit for packet filtering, said communication equipment characterized by 
being provided with: 

a filter key detecting unit for receiving a packet sent from a sending side while storing 
information as a filter key in a header portion of the packet and detecting the filter key from the 
header portion; and 

a comparing function unit for comparing a filter key of a sending side detected by the 
filter key detecting unit with a filter key of the receiving side held in advance, determining if the 
two do not match, and, when they do not match, discarding the received packet, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with lpv6 A 
said filtering information being immune from encryption to allow packet filtering . 

5. (CURRENTLY AMENDED) Communication equipment as set forth in claim444, 
characterized in that: 

the equipment is provided with a buffer for temporarily storing a received packet passing 
through the filter key detecting unit and in that the comparing function unit is comprised of: 
a filter key table holding a predetermined plurality of different filter keys, 
a search unit for searching if there is a filter key matching with a filter key detected by the 
filter key detecting unit in the filter key table and when there is none, outputting a discard 
command, and 

a buffer control unit for receiving the discard command and controlling the system so as 
to discard the packet stored in the buffer. 

6. (CURRENTLY AMENDED) An authentication apparatus having: 

a filtering authentication function unit for receiving user authentication information input 
from a user receiving a filtering service and authenticating the user and 

a filter key providing function unit for assigning and distributing a filter key as filtering 
information to be stored in a packet corresponding to the user authentication information to the 
user after the authentication at the filtering authentication function unit, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with Ipv6 x 
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said filtering information being immune from encryption to allow packet filtering . 



7. (CURRENTLY AMENDED) An authentication apparatus as set forth in claim6, 
characterized in that: 

the filtering authentication function unit has: 

a user authentication database in which user authentication information is registered in 
advance and 

a decision unit for determining the veracity of the input user authentication information by 
referring to the user authentication database and 
the filter key providing function unit has: 

a filter key assigning table holding a filter key assigned in advance corresponding to user 
authentication information and 

a filter key sending unit for sending a corresponding filter key from the filter key assigning 
table to the user when the veracity is confirmed , said filtering information being immune from 
encryption to allow packet filtering . 
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8. (CURRENTLY AMENDED) A packet communication system where a transferred 
packet is filtered, said packet communication system characterized by being provided with: 

a packet transmitting apparatus for storing filtering information for use in filtering at a 
receiving side in a packet to be sent to the receiving side and sending it from a sending side, 

a packet receiving apparatus for receiving a packet, at the receiving side, from the 
sending side through a network between a server and client, detecting filtering information 
stored in the received packet, holding predetermined filtering information of the receiving side, 
comparing filtering information of the sending side detected from the packet with the filtering 
information of the receiving side, and, when the two do not match, discarding that packet, and 

an authentication apparatus for receiving user authentication information input from a 
user receiving filtering service, authenticating the user, and assigning and distributing a filter key 
as filtering information corresponding to the user authentication information to the user after the 
authentication, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with lpv6 A 
said filtering information being immune from encryption to allow packet filtering . 

9. (CURRENTLY AMENDED) A packet communication system where a filtering 
service is provided for a packet transferred through a network between a server and a client, the 
packet communication system characterized by being provided with: 

function units used for access from the server or client of the user side to the network, 
that is, a first function unit for receiving user authentication information and authenticating the 
user and 

a second function unit for restricting access by assigning and distributing a filter key as 
filtering information corresponding to the user authentication information to the user after the 
authentication, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with lpv6 A 
said filtering information being immune from encryption to allow packet filtering . 

1 0. (CURRENTLY AMENDED) A packet communication system where a filtering 
service is provided for a packet transferred through a network between a server and a client, the 
packet communication system characterized by being provided with: 

function units used for access from a user on a network side to the server or client, that 
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is, 

a first function unit for receiving user authentication information and authenticating the 
user and 

a second function unit for restricting access by assigning and distributing a filter key as 
filtering information corresponding to the user authentication information to the user after the 
authentication, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with lpv6 A 

said filtering information being immune from encryption to allow packet filtering . 

11 . (NEW) A packet filtering method characterized by storing filtering information for 
use in filtering at a receiving side in a packet to be sent to the receiving side and sending it from 
a sending side, wherein 

the filtering information is stored in an Ipv6 extended header added to an Ipv6 header or 
in a flow label region in an Ipv6 header, when the packet is a packet in compliance with Ipv6, 
said filtering information being immune from encryption to allow packet filtering. 
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